CVE-2026-89572

A flaw was found in the cpufreq apple-soc driver of the Linux kernel. The applesoccpufreqinit function, responsible for adding Operating Performance Point OPP tables from firmware, does not properly remove these tables in certain failure scenarios. This improper cleanup can lead to resource...

CVE-2026-89657

A flaw was found in libceph in the Linux kernel. A malicious or compromised authenticated Ceph Object Storage Device OSD peer could send a specially crafted sparse-read reply that lacks proper validation of extent maps. This could cause the client to advance its message-data cursor beyond the...

CVE-2026-89680

A flaw was found in the Linux kernel's nfsd component. This vulnerability occurs when an inter-server COPY operation fails during its setup phase, leading to improper resource cleanup. Consequently, each failed operation results in a memory leak, consuming system resources. A remote attacker coul...

CVE-2026-89563

A flaw was found in the ip6tunnel module of the Linux kernel. Incorrect handling of socket buffers skb during headroom reallocation in the ip6tnlxmit function can lead to a double-free vulnerability. This occurs when an error path is taken after the original skb has been consumed, but the caller...

CVE-2026-89526

A flaw was found in the svcrdma component of the Linux kernel. A remote attacker can exploit this vulnerability by supplying a crafted RPC/RDMA Read chunk position field that is not properly validated against the received inline body length. This can lead to an underflow, exposing adjacent slab...

CVE-2026-80970

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA FireWire Control Protocol FCP subsystem. This vulnerability allows a local attacker to trigger the copying of uninitialized kernel memory to userspace. By sending a specially crafted short or zero-length data stage duri...

CVE-2026-89508

A flaw was found in the Linux kernel's RDMA/ucma component. A race condition exists in the ucmasetibpath function when handling events concurrently with ucmamigrateid. This can allow a local attacker with access to an RDMA device to trigger a use-after-free vulnerability, potentially leading to...

tryhackme-moniker-link

tryhackme-moniker-link Documentation of my hands-on lab Moniker Link CVE-2024-21413 completed on TryHackMe. Moniker Link CVE-2024-21413 — TryHackMe Lab Overview This repository documents my hands-on study in a TryHackMe room. The goal of this exercise was to understand how the vulnerability works...

CVE-2026-89766

A flaw was found in the Linux kernel. A local attacker could exploit a race condition in the pidfd subsystem, specifically within the PIDFDGETNAMESPACE ioctls. This vulnerability occurs because the system does not properly hold a lock execupdatelock during credential checks. This allows an attack...

CVE-2026-89765

A flaw was found in the Linux kernel's timers/itimer component. On native sparc64 systems, the struct kerneloldtimeval contains uninitialized padding bytes. When putitimerval copies this structure to userspace, these padding bytes can be exposed, leading to information disclosure. This...

CVE-2026-89732

A flaw was found in the Linux kernel's USB FunctionFS ffs module. A local attacker could exploit a deadlock vulnerability in the ffsep0read function. This occurs when a userspace daemon polls ep0 and the USB gadget is simultaneously torn down, causing the kernel to enter an unresponsive state. Th...

CVE-2026-89721

A flaw was found in the Linux kernel's phy: rockchip-samsung-dcphy component. A local attacker with access to the regmap debugfs interface could trigger an out-of-bounds read by attempting to dump registers. This occurs because the maxregister value is incorrectly set, causing the system to read...

CVE-2026-89714

A flaw was found in the Linux kernel's Network File System NFS component. When an NFSv4 mount attempt fails, the nfs4servercommonsetup function does not properly free a memory allocation for the delegation hash table. A client that persistently retries a failed mount can exploit this to cause an...

CVE-2026-89600

A flaw was found in the Linux kernel's fanotify subsystem. This use-after-free vulnerability occurs when the system attempts to report file range information after the memory holding that information has been released. A local attacker could potentially exploit this to read stale stack memory,...

CVE-2026-89580

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A local attacker could exploit a timing issue in the bpfgetstack function. This occurs when a preemptible BPF program is scheduled out, allowing another task to overwrite a per-CPU buffer. This leads to an out-of-bounds...

CVE-2026-89576

A flaw was found in the Linux kernel's device-mapper era dm-era component. When a snapshot operation fails, a block of metadata is allocated but not properly freed. This leads to a permanent leak of system resources with each failed attempt. Over time, this resource exhaustion can result in a...

CVE-2026-89568

A flaw was found in the Linux kernel. The khopreservedmemoryreserve function, responsible for reserving memory, incorrectly calculates the size of these reservations. This issue arises because it uses a 32-bit integer for bit shifting, which limits the maximum reservation size to 2 Gigabytes GiB...

lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296

CTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296 Apple Silicon runs at frequencies that are golden ratio harmonics of 587 kHz: · Performance cores: 3.2 GHz = 587 kHz × 5451 ≈ φ⁸ × 1000 · Efficiency cores: 2.0 GHz = 587 kHz × 3407 ≈ φ⁷ × 1000 · Neural Engine: 11.0 GHz = 587 kHz × 18739 ≈...

CVE-2026-89704

A flaw was found in the Linux kernel's nfsd component. The nfsdcopyfilerange function incorrectly samples the writeback error cursor after the copy loop. This allows a concurrent write operation to advance the error cursor prematurely. As a result, the system may report that data has been...

CVE-2026-89636

A flaw was found in the Linux kernel's Server Message Block SMB client. When the freetgts function frees data structures, a pointer ce-tgthint is not properly reset, leaving it pointing to a memory location that has already been deallocated. If this pointer is subsequently used, it can lead to a...